Static task
static1
Behavioral task
behavioral1
Sample
6cd0046ab5104992166292f04fd63ef6edd90755588eddfeedbc95e1a4de879c.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
6cd0046ab5104992166292f04fd63ef6edd90755588eddfeedbc95e1a4de879c.dll
Resource
win10v2004-20231222-en
General
-
Target
6cd0046ab5104992166292f04fd63ef6edd90755588eddfeedbc95e1a4de879c
-
Size
245KB
-
MD5
4f28ef23266743c1daae9ef85ee8b98d
-
SHA1
7bfcc1c2f0bab0db5865944ff7b67536e913f2cf
-
SHA256
6cd0046ab5104992166292f04fd63ef6edd90755588eddfeedbc95e1a4de879c
-
SHA512
d81f5f65b33836b66a39f3902afb9144f696c98a8549165a34531c083d6e144cacd0a51f77be1b2ba4bcb23d89633f2be78e036d471d34754f1cfde31485ad9c
-
SSDEEP
3072:LeV1VnLcpHBswBI+sOYEchy5dIzxFY56WxiSzN1lVD4vYsgUhWNogE2LLUo7m1+O:OLcpHB2+FkhyH2F24S7oWA2LLA+pD9O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6cd0046ab5104992166292f04fd63ef6edd90755588eddfeedbc95e1a4de879c
Files
-
6cd0046ab5104992166292f04fd63ef6edd90755588eddfeedbc95e1a4de879c.dll windows:5 windows x64 arch:x64
c1f674701ca9eeae414f9e9d913d592b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
msvcr100
_onexit
_lock
__dllonexit
_unlock
_malloc_crt
__clean_type_info_names_internal
__CppXcptFilter
__C_specific_handler
_amsg_exit
_encoded_null
free
_initterm_e
_initterm
malloc
??3@YAXPEAX@Z
__CxxUnregisterExceptionObject
__CxxDetectRethrow
__CxxRegisterExceptionObject
__CxxExceptionFilter
__CxxQueryExceptionSize
_cexit
__FrameUnwindFilter
kernel32
CreateEventW
ResetEvent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
Sleep
EncodePointer
DecodePointer
GetCurrentProcessId
img3bin
CameraMarkRelease
CameraMarkCreate
GrbNtvRelease
GrbNtvCreate
mscoree
_CorDllMain
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.nep Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.wibu Size: 167KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ